VYPR

haxcms-php

by Haxtheweb

CVEs (1)

  • CVE-2026-48527HigMay 29, 2026
    risk 0.57cvss 8.7epss

    HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions up to and including 26.0.0 are affected by a stored cross-site scripting (XSS) vulnerability in the `/system/api/saveNode` endpoint. An authenticated user with a permission to edit pages can bypass the…